Hi Chad, In Steps to Reproduce (1), did you add the self-signed certificate to the additionalTrustBundle: as noted in [2]. And did that create a user-ca-bundle config map in the openshift-config namespace? If yes, then what do you think about having the assisted-service operator look for either the user-ca-bundle config map or the config map through the injection method described in [3]. If it finds a config map containing the self-signed certificate, the controller will then mount it as volume to /etc/pki/ca-trust/extracted/pem. [2] https://docs.openshift.com/container-platform/4.6/installing/installing_bare_metal_ipi/ipi-install-installation-workflow.html#modify-the-install-config-yaml-file-to-use-the-disconnected-registry-optional [3] https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/networking/configuring-a-custom-pki#certificate-injection-using-operators_configuring-a-custom-pki
This feature is still WIP. It should land here: https://github.com/openshift/assisted-service/pull/1595
Looks like the pr merged - I'll run through testing it today.
By the way the operator.md is not correct - I opened https://bugzilla.redhat.com/show_bug.cgi?id=1956822 to correct
Isn't this a dupe of https://bugzilla.redhat.com/show_bug.cgi?id=1956937?
*** Bug 1955322 has been marked as a duplicate of this bug. ***
I validated that I can set a disconnected registry ca using this commit [1]. I'm able to deploy assisted service using the mirror registry change included in the above commit [2]. [1] https://github.com/openshift/assisted-service/commit/d42b8c859f82eb4938142dd0ca32d7357df435af [2] https://github.com/openshift/assisted-service/blob/master/docs/operator.md#mirror-registry-configuration
This bz is related to https://bugzilla.redhat.com/show_bug.cgi?id=1956937 (Which I also updated)
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:2438